Advanced voting system and method

ABSTRACT

In one embodiment, an advanced voting system includes one or more computing devices operable to receive instructions from a voter to adjust a color of a screen of a computing device. The color adjustment instructions are indicated by the voter&#39;s selection of non-dedicated keys associated with a specific color adjustment. The system is operable to execute the color adjustment instructions received from the voter, display ballot questions to the voter, and receive interactive vote selections from the voter.

TECHNICAL FIELD OF THE INVENTION

This invention relates generally to voting, and more particularly to anadvanced voting system and method.

BACKGROUND OF THE INVENTION

Voting systems have a variety of underlying objectives. First, acornerstone of any democracy is an accurate voting system that minimizesdisenfranchisement of voters. However, count accuracy is difficultbecause the large number of voters who participate in an election createvariances in ballot output. Another objective of voting systems is toaccurately gauge voter intent. Despite this objective, many factors maylead to situations in which voters are unclear as to what is required ofthem or unclear in indicating their selections. Such factors includeballot design, cumulative voting, multiple positions available for oneoffice, proximity of candidate names on a ballot, unintentional markingsleft on a ballot, and misspelling of write-in candidates. Additionally,in some elections eligibility requirements or the issues involvedrestrict who has the right to vote. Thus, voting systems must alsoattempt to ensure that voters only vote the legal number of times and inthe proper jurisdiction.

Methods of voting and counting votes have been in use since the earliestof human times. A paper ballot is a simple voting tool that is usuallypreprinted with the names of the candidates for a given office. In apaper ballot voting system, the voter marks an ‘x’ next to eachcandidate's name for whom the voter cares to vote. To maintain privacy,the voter folds the ballot and hands it to an election judge whodeposits it in a ballot box. Alternatively, the voter may be requestedto place the ballot in the ballot box himself. A second voting systemdeveloped to further these objectives uses mechanical voting machines.Typically, mechanical voting machines have levers next to the names ofcandidates and counters that increment each time a voter moves a leverto vote on a specific candidate or question. In a third system, thevoter is given a paper ballot, called a punchcard, that containsperforated or otherwise weakened areas. The punchcard is inserted into amachine that displays the names of candidates or the questions in areferendum. The alignment of the punchcard in the machine is such thatwhen the voter inserts a stylus next to the candidate's name, a piece ofpaper is punched out. The paper that is removed is called a chad. Thehole in the place where the chad once was can be detected by a lightsensitive card reader to determine the vote. In yet another system, thevoter is given a paper ballot and the voter is asked to fill in a circleor box associated with the candidate or other ballot question. As isother paper ballot systems, the ballot is placed in a ballot box and isread at a later time. The machine that reads these ballots find lightpassing through some circles or boxes and not through others. Thepresence or absence of a mark in a box or circle indicates the voters'choices. Such systems are called “mark-sense” systems or, alternatively,optical scan systems.

Regardless of the system employed, problems have always existed withsuch systems. The first and foremost deficiency is count accuracy. Whenit comes to large numbers of ballots, human readers are often more proneto error. Mechanical voting machines improve the counting process bycreating a tally for each candidate or question that can be recorded byelection officials at the end of the election. Although more accurate,faster, and less labor intensive, mechanical voting machines do notleave an audit trail for authorities to follow in times of a recount.Additionally, voters have become disenfranchised by mechanical votingmachines since allegations of tampering with the counters are difficultto dismiss and also because the voter has no assurance that his vote wastallied correctly.

Another deficiency in current voting systems stems from human error inmaking a selection. Variances in how voters mark a selection and erase aselection may render paper ballots unclear. Punch card systems attemptto replace human counting and selection entry errors with machinecertainty, but create problems unique to punch cards. For example,voters may not force the stylus through with enough force to completelyremove the chad. When entered into the counting machine, a partiallyremoved chad may be reinserted into the hole nullifying the voter'sintent altogether. Furthermore, a punched punchcard cannot be unpunched.An error in making the voter's selection requires the voter to begin thevoting process anew.

Furthermore, other problems with a paper ballot voting system areovervoting and undervoting, which occur when a voter either votes fortoo many candidates or too few candidates, respectively. Mechanicalvoting machines sufficiently diminish this problem by making itdifficult for a voter to vote for more candidates than is appropriateand by reminding the voter when a particular office or question has notbeen voted on. However, punch card and optical scan systems cannotdetect an overvote or undervote until the votes are tallied.Additionally, where ballots are not counted immediately at the pollingplace, the voter is never afforded the opportunity to correct thesituation.

Thus, regardless of the system employed, whether it is conventionalpaper ballots, mechanical machines, or punchcards, each system hasdeficiencies that effect the accuracy and efficiency of the votingprocess. The presidential election of 2000 has increased publicawareness and concern about current systems employed.

SUMMARY OF THE INVENTION

According to the present invention, disadvantages and problemsassociated with previous voting methods and systems have beensubstantially reduced or eliminated.

According to one embodiment of the present invention, an advanced votingsystem includes one or more computing devices operable to receiveinstructions from a voter to adjust a color of a screen of a computingdevice. The color adjustment instructions are indicated by the voter'sselection of non-dedicated keys associated with a specific coloradjustment. The system is operable to execute the color adjustmentinstructions received from the voter, display ballot questions to thevoter, and receive interactive vote selections from the voter.

In another embodiment of the present invention, an advanced votingsystem includes one or more computing devices. The computing devices areoperable to receive instructions from a voter to adjust the level ofmagnification of a screen of the computing device. The magnificationadjustment may be indicated by the voter's selection of an assignablekey associated with the magnification adjustment. The system may executethe magnification adjustment instructions received from the voter,display ballot questions to the voter, and receive interactive voteselections from the voter.

Particular embodiments of the present invention provide one or moretechnical advantages. For example, one or more embodiments of thepresent invention may provide for a voter to adjust the color andcontrast of a display screen of an advanced voting system such that theindividual voter may adjust the display to fit his particular viewingneeds. In addition, one embodiment of the present invention may providefor non-dedicated keys associated with the advanced voting system to beused to make the color and contrast adjustments.

Another technical advantage provided by one or more embodiments of thepresent invention is that the magnification level of the computerscreens of the advanced voting system may be adjusted by a voter to suitthe particular voter's viewing needs. In a particular embodiment of thepresent invention, the voter may select a portion of the screen tomagnify.

Certain embodiments may provide all, some, or none of these technicaladvantages. Certain embodiments may provide one or more other technicaladvantages, one or more of which may be readily apparent to thoseskilled in the art from the figures, description, and claims includedherein.

BRIEF DESCRIPTION OF THE DRAWINGS

To provide a more complete understanding of the present invention andthe features and advantages thereof, reference is made to the followingdescription taken in conjunction with the accompanying drawings, inwhich:

FIG. 1 illustrates an example advanced voting system;

FIG. 1A illustrates example color and volume adjustment key assignmentsassociated with a keypad of the advanced voting system;

FIG. 2 illustrates an example registration record for use with anadvanced voting system;

FIGS. 3A and 3B illustrate example computer ballots and computer screeninstructions for indicating a selection using an advanced voting system;

FIG. 4 illustrates a voting record that may be generated by an advancedvoting system;

FIG. 5 illustrates an example method of using an advanced voting system;

FIG. 6 illustrates an example system for absentee voting;

FIG. 7 illustrates an example method of adjusting the display screencolor and contrast; and

FIG. 8 illustrates an example method of adjusting the display screenmagnification.

DETAILED DESCRIPTION OF EXAMPLE EMBODIMENTS

FIG. 1 illustrates an example advanced voting system 10 including one ormore computing devices 12 that create an accurate, anonymous, andverifiable record of voters' selections in machine-readable form.Advanced voting system 10 includes a voter identifier system 14 thatstores identifying information associated with a voter and verifies theidentity of the particular voter at the time of voter check-in at thepolling place. Additionally, advanced voting system 10 includes a votingbooth 24 that is operable to display ballot questions, receive votingselections from a voter, and generate a ballot encoded with suchselections. Furthermore, system 10 includes a tallying system 40 that iscapable of decoding an encoded ballot or may communicate directly withthe voting booth 24 to tally votes stored within voting booth 24.

Voter identifier system 14 includes a computing device 12, one or moredata storage locations 16, and an election key generator 18. Apreviously created voter signature may be stored as a registrationrecord 17. Registration records 17 are stored in a data storage location16 that is operable to communicate with computing device 12 or that isincluded within computing device 12. Registration records 17, used toauthenticate the voter's right to vote in the particular election, aredescribed in greater detail below with respect to FIG. 2. For example,an election judge may ask the voter to present a registration card andthe signature on the card may be compared against the previouslyprovided signature through the voter identifier system 14.

In one embodiment of voting system 10, identification of the voterthrough a registration record 17 allows an election key generator 18 toprepare an election key 20. Once a voter's identity has been verifiedusing registration record 17, an election key 20 may be generated toenable the voter to vote in a voting booth associated with voteridentifier system 14. Election key generator 18 is operable tocommunicate with one or more data storage locations 16 and computingdevice 12 to facilitate generation of the election key 20. The electionkey 20 may be encoded with a digital signature 22 of a specific electionjudge. A digital signature is an electronic signature that can be usedto authenticate the identity of the sender of a message or the signer ofthe document. A digital signature is used to ensure that the originalcontent of the message or document that has been sent is unchanged.Digital signature 22 may be specific to the particular precinct at whichthe voter is authorized to vote and may be stored in data storagelocation 16. Election key 20 may be a bar coded card, a magnetic stripecard, an optical disc (such as a CD-RW or CD-ROM), a magnetic disc (suchas a floppy disk), or any other suitable data storage medium operable tobe encoded with digital signature 22 and/or any other appropriateinformation allowing a voter to vote at a voting booth 24. As anotherexample, election key 20 may include a smart card. A smart card isstandard credit card-sized plastic card within which a microchip hasbeen embedded. The smart card may include a memory-only chip, withstorage space for data, or may include a microprocessor chip with theability to process data onboard. Smart cards typically includecardholder verification techniques and security features built into thesmart card chips.

The digital signature 22 encoded on election key 20 may be decoded bythe computing device 12 on which the voter makes his voting selectionsto ensure that the voter does not substitute a different ballot from theone the voter is authorized to use. Validation through digital signature22 also prevents interested parties from procuring copies of a ballotand “hiring” citizens to go into the polling place and deposit a ballotcompleted by someone other than the voter. Digital signature 22 may alsobe used when the ballot is read, as is described below. Additionally oralternatively, voting booth 24 may use election key 20 to select theappropriate computer ballot containing the races and questions for whichthe voter is authorized to vote. In such embodiment, election key 20 maybe used to unlock electronic ballot information previously stored atvoting booth 24. In another embodiment, an electronic ballot may bestored on election key 20 itself. This particular election key 20 may beencrypted using public/private key or any other appropriate encryptiontechnology.

As with a traditional voting system, the voter may be directed to avoting booth that allows privacy for the voter. As described above,system 10 includes one or more electronic voting booths 24 in which avoter may vote (using election key 20, if appropriate). Each votingbooth 24 may include an associated computing device 12. In certainembodiments, computing device 12 may be a personal computer which mightinclude such components as a mouse 26, headphones 28, keypad 32, anddisplay screen 34. However, any other computing device, such as ahandheld computer with an appropriate input device, may also be used. Inan embodiment where a programmable handheld device, such as a personaldigital assistant (PDA) or a Tablet PC is used, the programmable deviceitself, along with its memory may be used to display the ballot, recordone or more votes, and communicate the votes to tallying system 40. Insuch a case, the memory of the handheld device is read and the handhelddevice is returned to election booth 24 to allow voting by a differentvoter.

One embodiment of the present invention may be used to allow voters toadjust the colors and contrast of screen 34 to improve viewabilty. Forexample, in one embodiment, the screen colors may be changed by alteringthe red, green and blue components of the screen background usingkeyboard keys that are non-dedicated to screen color changes. As used inthis invention, non-dedicated means that the keys do not have adedicated function for all applications on computing device 12. Rather,the keys are used for color adjustments in the voting application, butare used for some other non-visual or non-audible function when used incertain other applications or in the operating system run by computingdevice 12. Referring to FIGS. 1 and 1A, a voter may be provided withkeypad 32 and instructed that selecting the “7” key alters the redcontent by a fixed amount, selecting the “8” key alters the blue contentby a fixed amount, and selecting the “9” key alters the green content bya fixed amount. In one embodiment, selecting the “7,” “8,” and “9” keysin equal amounts in any desired order may have the effect of adding allthree colors in equal amounts, thereby increasing the white content ofthe screen and thereby increasing the contrast with characters in ablack font. In yet another embodiment, the voter may set the red, green,and blue screen color components to default values by selecting the “0”key on keypad 32. The voter may also select the “0” key to initializethe screen colors and, consequently, the screen contrast, whenever a newvoting session begins. Although screen color and contrast adjustmentsare described using red, green, and blue contents, the approach tochanging colors and contrast applies equally well to many mixtures ofcolor components. Furthermore, although examples of specific keysassociated with specific colors are discussed above, any non-dedicatedkeys associated with any appropriate screen colors may be used. Forexample, in another embodiment, two non-dedicated keys may be assignedto each screen color such that selecting one key will increase the valueof the associated screen color and selecting the other key will decreasethe value of the associated screen color. In one embodiment, after themaximum value of any particular color component is selected by thevoter, the next incremental selection of the associated key sets thatcolor component value back to zero (or some other lowest value) suchthat further incremental selections of the associated key will add thatcolor component again.

In one embodiment, in order to avoid setting the screen colors for onevoter in a way that makes it difficult for subsequent voters to view thescreen, the screen colors and screen contrast settings may return todefault values after a voter completes his voting session.

In one embodiment of the present invention, a computer program may bewritten in the Visual Basic for Applications (VBA) programming languagefor altering screen color and contrast. In this example embodiment,display screen 34 of computing device 12 displays a voting form to thevoter and keypad 32 contains a numerical keypad. The voting form isprogrammed so that when any key is pressed on keypad 32 program controlis passed to a computer routine called Color Setting. In, oneembodiment, the computer code for changing the color of the screenutilizes the voter's selection of the “0” key as a way of setting thescreen colors to default values. The voter may also touch the “0” key toinitialize the screen colors whenever a new voting session begins. Acomputer program consistent with the present embodiment may include thefollowing routine:

Private Sub Color Setting(KeyAscii As Integer)

Dim KeyValue As Integer

‘The maximum value of any color is 255.

‘Adding color values in steps of 32 provides a wide range of colors.

Select Case KeyAscii

Case Key0

‘Reset to initial value

RedValue=127

GreenValue=127

BlueValue=127

Case Key7

‘Change red

RedValue=(RedValue+32) Mod 256

Case Key8

‘Change blue

BlueValue=(BlueValue+32) Mod 256

Case Key9

‘Change green

GreenValue=(GreenValue+32) Mod 256

End Select

Me.Section(acDetail).BackColor=RGB(RedValue, GreenValue, BlueValue)

End sub

In order to provide a range of screen colors, particular embodiments ofthe present invention may allow the voter to incrementally add therespective red, green, and blue color content of the screen backgroundin a series of finite steps. Referring to FIG. 7, an example method foradjusting the display screen color in accordance with one embodiment ofthe present invention begins at step 200. At step 202, the voter mayselect the “0” key on keypad 32 to reset the screen colors to defaultvalues. At step 204, the voter decides if the screen color needs furtheradjustment based on the needs of the voter. If no further adjustment isrequired, the method ends at step 216. If further adjustment of thescreen color is required, the voter may either select individual red,green, and blue color adjustments in steps 206 through 210, or the votermay select the red, green, and blue color adjustments in equal amountsin any desired order in step 212 to adjust the white content of screen34. If the voter determines that too much of a color component has beenselected and that the color component should be reduced, the voter maycontinue to select the desired color component key until the maximumvalue of the particular color component is set. The next incrementalselection of that color component key sets the color component valueback to zero (or some other lowest value) and the voter may thenincrementally add the color component with additional color componentkey selections until the desired color component level is selected. Atstep 214, the voter again determines if further screen color adjustmentis required. If further adjustment is required, the voter is directedback to steps 206 through 210 or to step 212. If no further adjustmentis required, the process ends at step 216.

Although an example method is described, the steps may be accomplishedin any appropriate order. For example, adjusting the red, green, andblue color components can be accomplished sequentially, in any order, orsimultaneously. The present invention contemplates using methods withadditional steps, fewer steps, or different steps, so long as themethods remain appropriate for adjusting the screen color and contrastto enable visually impaired voters to use an advanced voting system.

Particular embodiments of the present invention may also oralternatively be used to allow voters to adjust the volume of thecomputing device 12 of voting booth 24. For example, in one embodiment,the volume may be changed by increasing or decreasing the volume usingkeyboard keys that are non-dedicated to volume changes. As used in thisinvention, non-dedicated means that the keys do not have a dedicatedfunction for all applications on computing device 12. Rather, the keysare dedicated to volume adjustments for the voting application or atspecific times within the voting application, but are dedicated to someother function when used in other applications or in the operatingsystem run by computing device 12. Referring to FIGS. 1 and 1A, a votermay be provided with keypad 32 and instructed that selecting the “+” keyincreases the volume by a fixed amount and selecting the “−” keydecreases the volume by a fixed amount. Although examples of specifickeys associated with specific volume adjustments are discussed above,any non-dedicated keys associated with any appropriate volumeadjustments may be used.

In one embodiment, in order to avoid setting the volume for one voter ina way that makes it difficult or uncomfortable for subsequent voters tohear sounds from the computing device, the volume setting may return toa default value after a voter completes his voting session.

In one embodiment of the present invention, a computer program may bewritten in the Visual Basic for Applications (VBA) programming languagefor altering volume. In one embodiment, this program uses the soundmixer functions which are part of the Microsoft Windows operatingsystem. One skilled in the art can readily find code information aboutcontrol structures and code fragments for the Application ProgrammingInterface on the Microsoft Developer Network website (www.msdn.com).Details can be found by looking for information about “Mixer” and“Volume.”

In particular embodiments of the present invention, the voter may beallowed to change the size of the characters and symbols displayed onscreen 34 while voting. Changing the size of the displayed charactersmay be done in an intuitive way so that voters do not need to learncomplicated computer instructions. For example, one embodiment of thepresent invention may use assignable function keys or buttons associatedwith computing device 12 to allow voters to adjust the magnificationlevel of screen 34. For example, on a Tablet PC computing device 12running Windows XP, a function key or button may be assigned that, whenselected by the voter, executes the “Windows Magnifier” program includedwith the operating system. As an example, the Compaq TC1000™ Tablet PChas assignable buttons on the computer screen bezel. One of thesebuttons may be assigned to execute the Windows Magnifier program. Aperson of skill in the art will understand how the assignment of buttonsto various functions is accomplished. The Windows Magnifier programcreates a window on screen 34 that can be moved anywhere on the screen.When the voter moves a stylus or mouse over a part of screen 34 wherethe Magnifier Window is not displayed, a magnified image of that screenarea is displayed in the Magnifier Window. Using properties of theMagnifier program and window, one skilled in the art can vary the amountof magnification presented to the voter. In addition, one skilled in theart will recognize that screen color and contrast and screenmagnification can be accomplished in combination or separately toprovide the voter with a wide range to screen adjustments to enable avoter to tailor the screen display to his particular viewing needs.

Referring to FIG. 8, an example method of adjusting the display screenmagnification on a Tablet PC begins at step 300. At step 302, theadministrator of the voting system, or other suitable person, may assigna function key or button to execute the Windows Magnifier program. Atstep 304, the voter selects the assignable button associated with theWindows Magnifier program such that the program executes. At step 306,the voter moves the stylus, mouse, or other appropriate indicatingmechanism over the portion of the screen that the voter desires tomagnify. At step 308, the voter determines if further magnification isrequired. If not further magnification is required, the method ends atstep 312. If further magnification is required, the voter may adjust thelevel of magnification to the desired amount using the functions of theWindows Magnifier program. After step 310 is complete, the methodreturns to step 308 to allow the voter to determine if furthermagnification is required.

Although an example method is described, the steps may be accomplishedin any appropriate order. The present invention contemplates usingmethods with additional steps, fewer steps, or different steps, so longas the methods remain appropriate for adjusting the screen magnificationto enable visually impaired voters to use an advanced voting system

Referring back to FIG. 1, to initiate voting, computing device 12 mayvisually and/or auditorily prompt the voter to insert election key 20into computing device 12 or a peripheral associated with computingdevice 12. Alternatively, computing device 12 may visually and/orauditorily prompt the voter to press an appropriate button on a keypad32, press or touch a touch sensitive screen 34 connected to computingdevice 12, insert a ballot into a ballot reader or printer, or otherwiseindicate that the voter is ready to begin. In one embodiment, computingdevice 12 may auditorily and/or visually ask the voter to insert intocomputing device 12 a specially coded compact disc (CD) which serves aselection key 20. Insertion notification, a feature of some operatingsystems and CD readers may then be used to start the voting process. Aspreviously described, computing device 12 may use digital signature 22to verify that election key 20 is valid. Computing device 12 may thenpresent a screen asking whether the voter would like help screens toassist with the voting process. The voter may choose to proceed throughhelp screens or begin voting immediately without such help screens.

Where computing device 12 includes a set of headphones 28, the voter maylisten to prerecorded instructions that may have been stored as .wavfiles or any other appropriate audio files. The ability to provideinstructions in an audio format facilitates the voting process for thevisually impaired or by others who may not readily understand writtentext appearing on a computer screen 34. Auditory instructions in alanguage selected by the voter may also be used to emphasize importantsteps that the voter must take during the voting process to ensure thatthe voting process is not compromised. In various embodiments,appropriate auditory instructions may be played throughout the votingprocess to aid the voter in making voting selections. In a particularembodiment, instructions for using the computing device 12 may haveinformation stored in several languages to accommodate voters for whomEnglish may not be easy to understand. The choice of the language can beencoded in the election key 20 or may be selected by the voter.

The use of such speech files may also be used to provide remote votingover the telephone. One or more computing devices 12 may interface witha telephone system linking a computing device to a voter telephone. Thecomputing device may include any computing device associated with votingsystem 10. In one example, the voter telephone may be the voter'spersonal telephone in the voter's home or office. Using the votertelephone, the voter may call into a specified number and be connectedwith a computing device 12. A computing device 12 may verify the voter'sidentity using a voice print analysis or any other appropriatetechnique. A computing device may broadcast recorded auditoryinstructions to the voter over the voter telephone. The auditoryinstructions in a language selected by the voter may instruct the voteron how to enter a voter selection. For example, the auditoryinstructions may instruct the voter to enter a voter selection bypressing a number on the keypad of the telephone in response to thevoice messages. Alternatively or additionally, the auditory instructionsmay instruct the voter to enter a voter selection by speaking at aprompt. When the voter has finished voting (which the voter may indicateor which a computing device may determine), a computing device maygenerate an encoded ballot 36. The encoded ballot 36 may be used by theelection authority to generate or verify ballot totals.

Computing device 12 may proceed to the computer ballot after the voterhas received the instructions or has chosen to forego instructions. Asan example, the first computer ballot question presented may be for theelection of one or more candidates or for a referendum question. Anyappropriate ballot formats may be used and presented to the voter.Furthermore, the voter may select a choice on a ballot using keypad 32,mouse 26, touch screen 34, or any other suitable technique. An examplecomputer ballot and the process of indicating a selection on the ballotare described in greater detail below with respect to FIG. 3. Once voterhas finished voting for a given ballot question by indicating hisselections and by indicating his readiness to proceed to the nextquestion, computing device 12 may determine if an overvote or anundervote has occurred. Alternatively and additionally, computing device12 may determine all overvotes and undervotes after the voter has votedon all questions. Determining an overvote or undervote in an election inwhich only one choice is allowed (as for president of the United States)is very simple, as only one selection may be made. However, certainelections may ask the user to select n candidates from a list of m (asfor a town council). An overvote occurs when voter selects more than nnumber of candidates. Conversely, an undervote occurs when voter selectsless than n number of candidates. Computing device 12 will detect anovervote condition and proceed according to the rules of the electionauthority. Such rules could be the allowance of the overvote at votingtime but disallowance of the vote at counting time, or not allowing thevoter to overvote at all. On the other hand, if an undervote isdetected, the voter may be warned that it has occurred and given achoice to proceed without adding another choice or to vote for anothercandidate.

When the voter has finished voting (which the voter may indicate orwhich computing device 12 may determine), the voter is presented with asummary on screen 34 showing the voter's selections. The voter may bepresented with the choice of printing a completed ballot or returning tovoting. When the voter indicates that all choices are final, computingdevice 12 generates an encoded ballot 36 using ballot generator 30included in voting booth 24 or otherwise in communication with computingdevice 12. In one particular embodiment, the encoded ballot 36 includesa barcode encoded with the voter's choices. However, those skilled inthe art will realize that generating a ballot 36 may include generatinga magnetic card, punching a punch card, or producing any othermachine-readable medium. In one embodiment, the encodings on ballot 36may be printed using magnetic ink character recognition (MICR)technology. MICR is a character recognition system that uses special inkand characters. MICR provides a secure, high-speed method of scanningand processing information. When ballot 36 that contains encodingsprinted in MICR ink is to be read, ballot 36 is passed through a machinehaving MICR reading capabilities. The machine magnetizes the ink andthen translates the magnetic information into characters. In anotherembodiment, encoded ballot 36 may also contain a human-readableindicator of the voter's selections (that may also later be read by adocument reader employing Optical Character Recognition (OCR)technology). The election authority may decide which type of ballotshould be printed by computing device 12.

In addition to or instead of generating ballot 36, computing device 12may store a voting record 38 of the voter's choices in a data storagelocation 16. Voting record 38 may be used by the election authority asthe official result of the election for that computing device 12 or theelection authority may choose the encoded ballot 36 to be the officialresult. Where the voting record 38 is chosen to be the official resultof the election, computing device 12 may communicate directly with atallying computer 42 which will tally the votes as contained in votingrecords 38 of one or more computing devices 12. Alternatively, thecomputing device 12 upon which voter selections are entered may tallythe votes directly and report results for that computing device 12. Ineither case, encoded ballots 36 may be used to verify the result oftallying system 40 in the case of a recount or audit. As such thereshould be a correlation between the voting records 38 in the memory ofcomputing device 12 and the machine-readable encodings on an associatedballot 36. This correlation may be examined by election or judicialauthorities should there be a recount or challenge after the election.By combining electronically tallying voting records 38 and generatingencoded ballots 36, a technical advantage may be provided since advancedvoting system 10 may offer election authority multiple checks onelection results.

Voting record 38 may also contain a unique identifier linking votingrecord 38 to a particular computing device 12. Voting record 38 isdescribed in greater detail below with respect to FIG. 4. The uniqueidentifier may also be added to the encoded ballot 36. The identifiermay be used as a fraud detection device since it would be difficult forcounterfeit ballots to contain a code identifying a computing device 12.Additionally, the memory of computing device 12 and the encoded ballot36 may also be encoded with the digital signature 22 of an electionjudge. Digital signature 22 may be used as a method of authenticatingencoded ballot 36. Using public key technology, ballots 36 so markedhave a much smaller chance of being substituted with fraudulent ballots.

Encoded ballot 36 may also include one or more ballot data fields. Theballot data field may be represented by a barcode, magnetic stripe,series of characters printed using magnetic ink character recognition(MICR) technology, or other machine-readable medium. Alternatively oradditionally, the ballot data field may include a series ofhuman-readable numbers and/or letters. To prevent fraud, the ballot datafield may be unique to a particular encoded ballot 36.

In particular embodiments, the ballot data field may provide informationabout the election, the voter, and/or the voter's selections. Forexample, when read by the appropriate machine, the machine-readableballot data field may translate to:

-   -   2002110701992345051020304050xx        Although the digits of the ballot data field may appear random,        the ballot data field may include one or more fields providing        information valuable to the election authority. In the above        example, the first field includes the first eight digits and        indicates the date on which the election was held. Thus, the        first field of the example ballot data field indicates that the        election was held on Nov. 7, 2002. The following field may        include the next two digits and may be used to indicate the        precinct number in which the vote was cast. For example, the        precinct number included in the example ballot is “01”. A third        field may include two digits recording an identifier associated        with the precise computer that the voter used to cast his vote.        For example, the ballot data field described above indicates        that the voter used computer “99” to cast his vote.

A ballot data field may also include a field recording a double countprotection code (DCPC) (such as “2345” in the example ballot data fieldabove). A DCPC may be randomly assigned to each voter voting at theprecinct. Each DCPC generated is stored in the voting computer. Thevoting computer is programmed to consult a table of assigned DCPCs toensure that no DCPC is assigned more than once. The DCPC of a ballot isread by an appropriate computer when tallying votes, and that computer(and potentially other associated computers) keep a record of whichballots have been tallied according to the DCPC of the ballot.Therefore, if an attempt is made to accidentally or fraudulently recountthe ballot, such a recount will be rejected since the DCPC of the ballotis already recorded as having been read. Because the DCPC is randomlyassigned, inspection of the DCPC cannot lead to an association of theballot with a specific voter, and ballot secrecy is maintained.

A ballot data field may also include a series of digits or otherindicators that identify the voter's selections. For example, the votergenerating the example ballot data field made five choices and voted forcandidates “10”, “20”, “30”, “40”, and “50”. Although digits are used inthe example ballot data field, any other appropriate technique may beused for identifying the voter's selections.

Although the ballot data field of an encoded ballot may seem as if it israndomly generated, one studying a series of encoded ballots 36 andballot data fields may “decode” the arrangement of numbers and/orletters. Accordingly, unscrupulous persons might generate fraudulentencoded ballots 36 in an attempt to effect or compromise the outcome ofthe election. To prevent fraud, the example ballot data field may alsoinclude a field for two or more anti-fraud digits. In the example ballotdata field described above, the anti-fraud digits are indicated as “xx.”Anti-fraud digits provide a check of all other digits in a ballot datafield. The anti-fraud digits may be generated in any appropriate manner,and may be encrypted in a way that is unique for each election (or asoften as desired by the election authority). One method of generatingthe anti-fraud digits sums the digital value of each character in aballot data field and reduces that sum modulo 99 to arrive at the 2anti-fraud digits. In one embodiment, before summing, the digital valuesare looked up on an encryption key that has every possible alphabeticand numeric character code. For example, the string“ABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890” may be an encryption key. Findingthe position of the character to be encoded on the key gives theencrypted value. One skilled in the art can use other well-knownencryption methods.

A component of voting system 10 may operate to verify the authenticityof the ballot using the ballot data field. For example, ballot reader 37and/or vote tallying reader 39 may store the anti-fraud digits or thealgorithm used to generate the anti-fraud digits and may verify theauthenticity of encoded ballot 36 by comparing the anti-fraud digitsincluded in the ballot data field to anti-fraud digits known orgenerated by ballot reader 37 and/or vote tallying reader 39. Othercomponents of voting system 10 may also be used to verify theauthenticity of encoded ballot 36 by verifying the anti-fraud digitsappended to the ballot data field.

In some elections, the number of voter choices may be very large. Forexample, a large number of voter selections are possible in a generalelection that includes questions regarding the retention of a largenumber of judges. In such cases, the ballot may contain more than oneballot data field. Alternatively, one or more ballot data fields mayinclude information about the election and/or the voter and one or moreother data fields may be used to identify the voter's selections.

Each ballot data field may contain anti-fraud and ECC digits to ensurethe integrity of the ballot data field. Furthermore, when more than oneballot data field appears on the ballot, each ballot data field isnumbered with the ballot data field number and the total of number ofballot data fields. For example, in one embodiment the ballot datafields appear according to the following form:

-   -   12x..x        -   and    -   22y..y        where “12” means that the ballot data field is number one of two        and “x..x” is shown to represent the remainder of the first        ballot data field, and “22” means that the ballot data field is        number two of two and “y..y” is shown to represent the remainder        of the second ballot data field. Since the ballot field contains        the number of the instant ballot data field and also the count        of the total number of ballot data fields, the counting system        can determine cases in which one or more ballot data fields is        absent or is not read.

Although the example ballot data field described above includes digitsfor storing information about the election, the precinct, the voter, andthe voter's selections, the described ballot data field is for examplepurposes only. The ballot data field may include any information that isuseful to the election authority and this information may be included inany order. In alternative embodiments, the ballot data field may not becoded to include information relevant to the election or the voter.Instead, the ballot data field may include any randomly generatedarrangement of numbers or letters. Regardless of the techniques used togenerate the ballot data field, the fraudulent duplication of encodedballots may be prevented where the ballot data field is unique to theparticular encoded ballot 36. If during the tallying or verifyingprocess, duplicate ballot data fields are encountered, the encodedballots 36 with such duplicate ballot data fields may be scrutinized orexcluded from the election totals. One skilled in the art will noticethat duplication of ballots is prohibited despite the fact that votersmay make identical selections. The combination of DCPC, computer numberand precinct number is assured to be unique across the entire electionjurisdiction for each election.

In certain embodiments of system 10, voting booth 24 may also include aballot reader 37 capable of reading encoded ballot 36 in the formgenerated by ballot generator 30. Alternatively, the reader 37 may beshared in a separate private location within the polling place. Votersmay use the reader 37 to verify that the encodings on ballot 36 actuallyexpress the voter's intent. If after receiving a translation of encodedballot 36 from ballot reader 37, the voter desires to change encodedballot 36, the voter may ask an election judge for a new election key 20and the previously generated encoded ballot 36 may be destroyed. Thisensures that in the case where encoded ballot 36 is the official vote,there is no opportunity for the voter who changes his mind to vote morethan once.

The next step in the voting process is a formal tallying of the all castvotes using tallying system 40. In one embodiment, tallying system 40may be at the polling place. The voter may present encoded ballot 36 toan election judge who then inserts encoded ballot 36 into a votetallying reader 39. Vote tallying reader 39 is preferably capable ofreading barcodes and other machine-readable formats, and may beconnected to a tallying computer 42. Additionally, vote tallying reader39 may be adapted to accommodate reading a large number of ballots 36.The tallying computing device 42 verifies that digital signature 22 ofthe election judge is correct and also verifies that the ballot datafield on encoded ballot 36 has not been used before. This ensures thatvotes may not be counted twice as a result of confusion at the pollingplace. The tallying computing device 42 may also check that thecomputing device identifier, when added to encoded ballot 36, is valid.

To ensure that there is no misreading of the encoded ballot 36,encodings on ballot 36 may include error correcting codes (ECCs). ECCsare derived from the other digits in the encodings and may be used toindependently verify that a reading of the encodings is correct. Becausean ECC may be derived from the encodings, the ECC may be said to include“redundant information.” A system employing ECCs can identify redundantinformation contained within a character string to determine thepresence of errors within the remaining characters of the characterstring. Example systems employing error correcting codes to detect andcorrect errors may be found in U.S. Pat. No. 4,334,309, issued to Bannonet al. on Jun. 8, 1982, and U.S. Pat. No. 6,282,686, issued to Cypher onAug. 28, 2001. As implemented in voting system 10, any computing device12 within system 10 may include ECC software enabling the computingdevice to generate, identify, and translate ECCs within the encodings onballot 36.

In particular embodiments, the ballot data field or other encoding onballot 36 may include one or more ECCs within the stream of charactersor bits comprising the ballot data field or other encoding. For example,the field described above as storing anti-fraud digits may alternativelyor additionally store ECCs. In certain embodiments, the anti-frauddigits may serve both purposes. For example purposes only and not by wayof limitation, assume that the encodings on ballot 36 include thefollowing binary string: 10110011 10. In this example, the first eightbits of the binary string comprise the ballot data field, and the lasttwo bits of the binary string comprise the ECC. In this example, eachdigit or bit of the ECC is a function of a four-bit portion of thebinary string. The first ECC bit is a function of the first four-bits ofthe ballot data field, and the second ECC bit is a function of the lastfour-bits of the ballot data field. The example binary string uses asimple function to create the ECC bits. It is recognized, however, thatthe function may include any mathematical algorithm applicable to thebinary string. The example function merely adds the relevant four bitsand determines whether the sum is even or odd. In the example, the ECCdigit or bit representing an odd sum is a numeral “1”, and the ECC digitor bit representing an even sum is a numeral “0.” Accordingly, becausethe sum of the first four bits is an odd five, the first ECC bit is a“1.” Because the sum of the second four bits is an even two, the secondECC bit is a “0.” The process of calculating sums over different groupsof bits is repeated in order to arrive at a total ECC. Recreating thesesums when the characters are read provides the ability to correct singlebit errors as described in the references.

Various components of voting system 10 may be software enabled togenerate and/or identify ECC digits or bits. In particular embodiments,computing device 12 and ballot generator 30 may generate ECC digits orbits and encode the ECC digits or bits on encoded ballot 36 at votingbooth 24. ECC digits or bits may be generated and appended to the ballotdata field. Alternatively, ECC digits or bits may be encodedindependently on encoded ballot 36. ECC digits or bits may be identifiedby the placement of the ECC digits or bits in the binary stringcomprising the ballot data field or by the location of the ECC digits orbits on encoded ballot 36. In particular embodiments, ballot reader 37,vote tallying reader 39, tallying computing device 42, and/or any othercomputing device within voting system 10 may be enabled with ECCtechnology. When reading a ballot 36, an ECC-enabled component of votingsystem 10 may ensure that there are no errors by re-performing thefunction used to create the ECC digits or bits and comparing the resultto the ECCs stored in the binary string. In this manner, components ofvoting system 10, such as ballot reader 37, vote tallying reader 39, andtallying computing device 42, may verify that the bits within a binarystring have been correctly read. ECC technology enables voting system 10to detect single and double bit errors in the binary string or otherencodings on encoded ballot 36, i.e. an error in one or two bits of theballot data field. The detection of single and double bit errors enablestallying computing device 42 to determine if an encoded ballot 36 shouldbe re-read, discredited, or flagged for visual inspection by theelection authority. In particular embodiments, ECC technology may alsoallow for the automatic correction of single bit errors, i.e. a bit inthe ECC does not match an associated portion of the binary stringcomprising the ballot data field. By automatically correcting single biterrors, tallying computing device 42 may count encoded ballots 36 thatmight otherwise be discarded or disqualified from consideration.

When polling place tallying is used, tallying computer 42 maintains anongoing and updated count for votes cast at that particular precinct. Iftallying computer 42 loses its memory or must be reset for some reason,encoded ballots 36 can be reread by vote tallying reader 39 to recreatethe precinct totals. After the last vote is cast, tallying computer 42may be used to create a special printed report of precinct totals andmay also contain digital signature 22 of an election judge. In oneembodiment the report may be called in to a central counting facility,sent by fax or other electronic means, or manually carried to thecentral counting facility. The special report may also bemachine-readable. Thus, the central counting facility need only read, orotherwise tally the special reports of multiple precincts in order toobtain an authority wide result. In another embodiment centralizedtallying may be used. In this embodiment tallying computer 42 and votetallying reader 39 are located at a centralized location rather than ateach precinct. As a further alternative, the tallying system 40 may notbe necessary at all except for auditing votes in case of a recount orelection challenge. In such an embodiment, the vote may be talliedelectronically using the voting record 38, as described above.

The various components of system 10 may be associated with one or morecomputers 12 in one or more locations. For example, some or all of voteridentifier system 14, voting booth 24, and tallying system 40 may belocated in the same location and be implemented using one or morecomputing device 12. Furthermore, voter identifier system 14, votingbooth 24, and tallying system 40 may share one or more components, ifappropriate. Additionally, although data storage device 16 for storingdigital signature 22 is illustrated in FIG. 1 as a separate storagelocation from data storage location 16 for storing registration record17, it is recognized that all data could be stored in a single datastorage location. Similarly, although shown as separate from computingdevice 12, it is recognized that data storage locations 16 may beincluded in computing device 12. For example, the hard drive ofcomputing device 12 may serve as a data storage location 16.

As a further modification, system 10 may operate without using anelection key generator 18 and election key 20. In one embodiment, avoter may be given a ballot after being verified as a registered voter.The voter may take the ballot to voting booth 24 and insert the ballotinto ballot generator 30. After completing the voting process, ballotgenerator 30 may then encode the ballot with the voter's selections tocreate encoded ballot 36. In an alternative embodiment, the voter neednot be given a ballot before entering voting booth 24. Rather, ballotgenerator 30 may independently create encoded ballot 36. Regardless ofwhether system 10 includes an election key 20 and regardless of theprocess used to create encoded ballot 36, encoded ballots 36 may beread, verified, tallied, or otherwise handled by election authority asdescribed above.

A paper ballot voting system, as described above, requires printingspecialized ballots prior to each election. In addition to beingexpensive, a pre-printed paper ballot system requires a sufficientamount of lead time for preparing and printing the ballots. Becausesystem 10 requires no preprinted ballots, system 10 may be leased to anelection authority to mitigate election costs. In one embodiment, system10 could be leased to an election authority for the same cost ofpreparing preprinted ballots for a printed ballot system.

FIG. 2 illustrates an example registration record 17 for use withadvanced voting system 10. Voter registration is also an important partof any voting system 10. In previous systems, a voter registers to voteat an established registration facility or is registered by registrarsat ad hoc registration facilities. When the voter registers, the votertypically signs his name. On an election day, when a voter presentshimself at a polling place, he identifies himself and his identity maybe checked by comparing a signature made at the polling place with thesignature made at the time of registration. Previous systems depend onthe skill of an election judge to verify that the signature made at thepolling place matches the signature made when the voter registered.Election judge's are often not adequately trained in handwritinganalysis and an imposter may be able to vote in lieu of the legallyregistered voter.

According to one embodiment of system 10, a voter registers to vote asdescribed above and provides identification information such as adriver's license indicating the voter's name and address. Pertinentinformation pertaining to the voter is stored in a registration record17, as described above with regard to FIG. 1. Registration record 17 mayinclude a number of fields or segments that each includes information orother data relating to the voting process. This information or otherdata may be in alphanumeric, graphical or any other appropriate format.Contained in the fields within registration record 17 may be the voter'sname 50, the voter's street address 52, the voter's city of residence54, and the voter's state of residence 56 and postal code 58. Theaddress fields 52-58 are often important to the registration processbecause the address fields may be used to determine the voter's precinct60, which may also be stored in voting record 38. The address fields52-58 and/or precinct 60 may also be used to determine the specificballot questions to be issued to a voter in an election where localissues vary from place to place. The voter may also be required to signa voter registration card. The signature provided may be used to verifythat the person presented is the bona fide registered voter. In oneembodiment, an election authority may choose to store an image of voterssignature in signature field 62 of registration record 17.

In another embodiment, the voter may be required to provide a biometricsample in addition to or in lieu of the signature 62. A biometric samplemay be associated with a high degree of certainty to certain personal,biological characteristics of a person and may be stored for laterauthentication purposes. The digital representation of a biometricsample may be stored in the biometric field 64. According to thebiometric method selected by the election authority, more than onebiometric sample may be stored and additional fields 68 for additionalbiometric samples may be reserved in registration record 17. Theanalysis of the biometric sample 64 and the linkage of that biometricsample 64 to a voter is called a biometric identification. Thatbiometric identification may be a based on a thumbprint such asdisclosed in U.S. Pat. No. 5,729,334, a retinal scan as disclosed inU.S. Pat. No. 5,956,122, a voice print such as disclosed in U.S. Pat.Nos. 5,901,203 or 6,205,204, or any other biometric identification orcombinations thereof. In order to account for changes in physicalcharacteristics of registrants over time, the dates that each biometricsample was created may be stored in date fields 66 and 70 ofregistration record 17. As shown in FIG. 1, the biometric identificationis stored in data storage location 16. In other embodiments, theelection authority may opt to store the biometric identification in acentralized storage database or print the biometric identification on aportable medium such as a magnetic stripe card, bar coded card or othersuitable medium.

Registration record 17 is used to authenticate the voter's identity atelection time. In one embodiment, when the voter arrives at the pollingplace, the voter is asked to present a signature and that signature iscompared against digitized signature 62. Election judge may also oralternatively ask the voter to present a polling place biometric sampleof the same type that was provided when the voter registered and as iscurrently stored in field 64 or 68 of registration record 17. Pollingplace biometric sample can be used, in conjunction with appropriatecomputing facilities, to match the polling place biometric sample withbiometric sample 66 stored in the registration record 17. The electionauthority may opt to store the biometric identification in a centralizedstorage database or print the biometric identification on a portablemedium such as a magnetic strip car, bar coded card, or other suitablemedium. One advantage of storing registration record 17 in a portablemedium that is retained by the voter is avoiding centralized storage ofbiometric identification data, which may be seen by some as a threat toprivacy. Nonetheless, the election authority may prefer a centralizedstorage to ensure that voters are not denied the right to vote simplybecause the voter lost his voter registration card or other mediumstoring the biometric sample. In such an embodiment, the polling placebiometric sample provided by the user may be compared via communicationtechniques with the biometric sample 66 stored centrally or thecentrally stored information may be copied or communicated to computingfacilities at the polling place.

FIGS. 3A and 3B illustrate particular embodiments of example computerballots 78 and computer screen instructions that may be used inconjunction with system 10. If the ballot question is for an office, asillustrated in FIGS. 3A and 3B, the voter is shown a screen that statesthe name of the office 80 and displays the names 82 and partyaffiliations of all candidates. Certain races, such as that for thePresident of the United States, may have coupled candidates such aspresident and vice president. The candidate names 82 and otherinformation identifying the candidates are each displayed along with acheck box 84. Near to, and associated with the name of the candidate,may also be a candidate number 86.

FIG. 3A illustrates a computer ballot 78 prior to the voter's selectionof a candidate. In one embodiment, the voter expresses a choice by usingmouse 26 or other appropriate input device to click on or otherwise makea selection of the candidate name 82, the box 84 next to candidate name82, or the candidate number 86. Those skilled in the art will understandthat a touch sensitive screen 34 may also or alternatively be used andthe voter may touch the candidate's name 82, box 84 or number 86 toexpress a choice. Particular embodiments of the present invention alsoprovide alternative methods for the voter to express a choice. As anexample only, the voter may type the name 82 or number 86 of thecandidate and, in so doing, the choice may be indicated in the box 84next to the candidate name 82, as illustrated in FIG. 3B. Electionauthorities may choose to have one, a combination of more than one, orall of these selection methods available to voter. Alternatively oradditionally, the voter may also be able to indicate the desire to votefor all candidates with a particular party affiliation in a number ofdifferent races. Where desirable, voting system 10 may also supportcumulative voting in one or more races.

A computerized voting system 10 may be new to many voters who are notexperienced in using computers. Therefore, in one embodiment, the votingauthority may decide to present only one question at a time on screen34. Also, context sensitive instructions may appear on screen 34 aftereach voter action. According to one embodiment, when a ballot question78 first appears, instructions 90 may be displayed on the screenregarding how to select a candidate and instructions 92 may be displayedregarding how to proceed to the next or previous questions. Instructionsto the voter may be placed in a part of the screen that is not relatedto voting. To further minimize voter confusion, instructions to thevoter may be displayed in a different typeface, color and/or font size.Additionally, an election authority may decide to include instructions94 informing the voter that spoken instructions are available on aheadset 28 if the voter clicks on instructions 94. As is illustrated inFIG. 3B, after the voter indicates a selection, the context sensitive,on-screen instructions 96 may be displayed to inform the user how tochange his selection. The voter may then proceed with the next questionor may return to a previous question.

Particular embodiments also provide the ability to guide the voterthrough casting a write-in ballot. Some election jurisdictions do notcount write-in votes unless a candidate has properly registered as awrite-in candidate. In that case, the voting system 10 may show a box onthe screen indicating that write-in votes may be made when a voter has awrite-in choice. The voter may be allowed to select “write-in” as acandidate choice using any of the above described methods. Onceselected, an instruction may appear explaining that the voter will beable to write the name of the write-in candidate on encoded ballot 36once produced by ballot generator 30. A space may be created on encodedballot 36 allowing the voter to add such a name. The fact that there isa write-in candidate on the computer ballot is encoded in ballot 36 toallow for manual processing of the write-in. Alternatively, the votermay be instructed that he should type the name of the write-in candidateon keyboard 26 or otherwise enter the candidate's name. The voter mayalso or alternatively write-in the name manually.

As mentioned above, particular embodiments of the present inventionallow the visually impaired or those who are not proficient in readingto vote. If the voter selects to listen to instructions on headphones 28as described above, the voter is guided through the voting process byprerecorded spoken instruction. The name of the office and thecandidates names are spoken to let the voter know who all the candidatesare. The list may be repeated to minimize confusion. The voter may thenbe told to press a mouse button 26, press anywhere on the touchsensitive screen 34, or take any other appropriate action to indicatethe selection of a candidate whose name is spoken at that time. Toensure the user's selection was properly registered, the system may thenrepeat to voter the selection that was made. Similarly, computing device12 may speak instructions to voter on how to proceed (for example,“click now to go back” or “click now to go forward”). The voter's intentis registered by the time proximity between the spoken prompt andvoter's pressing of the button or other appropriate action.

In one embodiment, the election authority may decide at the time theuser leaves each ballot question to perform an undervote/overvote test,as described with regard to FIG. 1. Again, depending on a particularembodiment and election laws, overvotes and undervotes may or may not beallowed. According to the options provided by particular embodiments,the user may be warned that an undervote or an overvote has occurred atthe time the voter leaves a ballot question. Alternatively oradditionally, such warnings may be presented to the voter at the end ofthe voting session, according to the rules of the election authority.

FIG. 4 illustrates a voting record 38 that may be generated by system10. As described with regard to FIG. 1, system 10 maintains a votingrecord 38 of each vote on each question as selected by the voter. Votingrecord 38 may contain the ballot data field 102 described above, theballot page 104 for which the voter made a selection, and each choice106 made by voter. For an election, such as for president, where onlyone vote may be cast, only one choice 106 will have been recorded invoter register 38. By contrast, elections for offices electing more thanone candidates to a position, such as town council, several choices 106will be recorded in voting record 38. An example embodiment of thepresent invention allows up to 32 choices per ballot page 104.Furthermore, an apparatus identifier 110 may identify a particularcomputing device 12 used by the voter to prevent fraud. The date 112 ofthe election may also be stored in voting record 38 as a further check.In an effort to protect the identity of the voter, election authoritymay choose to record only the date, and not the time, of theregistration of a choice 106. A different record 38 may be stored foreach different ballot question. For a given voter, the ballot data field102 is the same in each such record 38. This allows each voter to reviewon his or her choices and protects choices made by other voters frombeing accessed.

FIG. 5 illustrates an example of a method for using advanced votingsystem 10. The method begins at step 150 by storing identifyinginformation for a particular voter in registration record 17. Asdescribed in regard to FIG. 2, registration record 17 may contain thevoter's name, address, precinct, and a digitized signature. Additionallyor alternatively, voter may be required to submit one or more biometricsamples, which may also be stored in registration record 17. When voterarrives at the polling place; a voter's identity may be authenticated atstep 152 by comparing a presented signature or other identifyinginformation with the digitized signature 62 or other identifyinginformation stored in registration record 17. In embodiments utilizingbiometric samples, a biometric sample 64 stored on registration record17 may be compared to a biometric sample submitted at the polling place(instead of or in addition to the signatures being compared).

After voter's identity is authenticated, an election key 20 is generatedat step 154 and given to the voter. An encoded digital signature 22 ofthe election judge for voter's precinct may be stored on election key20. The voter inserts election key 20 into computing device 12associated with a voting booth 24 (or a peripheral in communication withcomputing device 12) at step 156. Computing device 12 may communicatewith election key 20 at step 158 to retrieve voter information. Forexample, voter information may include an electronic ballot to be usedby the voter that was stored on election key 20 or informationidentifying an electronic ballot stored at computing device 12 to beused by the voter.

At step 160 after an appropriate ballot or other voter information isretrieved, computing device 12 presents an instruction screen to thevoter to allow the voter to decide whether to see detailed instructionsbefore voting. In one embodiment, step 160 may also include the voterchoosing to listen to auditory instructions and donning headphones 28connected to computing device 12. Alternatively, voter may choose atstep 160 to forgo the instruction screens altogether. At step 162, thefirst ballot question 78 is presented to the voter. Example ballotquestions 78 were described in greater detail above in regard to FIG. 3.Voter then enters voter selections to the ballot question at step 164.In one embodiment, step 164 includes the voter indicating a selection bytyping on keyboard 32. In other embodiments, step 164 may include voterindicating a selection by clicking on mouse 26 or touchingtouch-sensitive monitor 34. As part of step 164 and after voter hasindicated his voter selection, a screen may appear that informs thevoter of how he may proceed to the next ballot question or return to theprevious ballot question. Computing device 12 may audit voter'sselection as a step 166 to determine whether there has been an undervoteor overvote before proceeding to the next ballot question. Where such anirregularity is detected, computing device 12 may inform voter of thesituation and may prompt voter to remedy the situation if local electionlaws allow. Alternatively this step may not be performed at all or maybe performed after the voter has completed the ballot.

At step 168, computing device 12 determines whether there are additionalballot questions to be presented to the voter. If additional questionsexist to present to the voter, the method returns to step 162 andcomputing device 12 presents the next question to the voter. Computingdevice 12 will continue the process by proceeding through steps 162-168until the last ballot question 78 is presented to the voter. After allballot questions are presented to the voter, the method proceeds to step170 where computing device 12 presents the voter with a summary of voterselections. In one embodiment, step 170 includes giving the voter thechoice of either finalizing voting selections as they appear in thesummary or returning to previous screens to change his voting selectionsbefore finalizing his voter selections. Where voter chooses to return toprevious screens, the method will return to step 162 and proceed forwardfrom there. At step 172 the voter's selections are stored in ananonymous voting record 38. Multiple voting records 38 may be used foraudit purpose when irregularities are discovered or when a vote ischallenged.

As described above, computing device 12 may be coupled to ballotgenerator 30. Step 174 includes production of a machine-readable encodedballot 36 by ballot generator 30. Encoded ballot 36 may be encoded withthe voter's selections. At step 176, voter selections are tallied. Inone embodiment, the multiple encoded ballots may be tallied by atallying computing device 42. Step 176 may include feeding the encodedballots 36 to a ballot reader 37 that tallies the votes at eachprecinct. Alternatively or additionally, step 176 may include tallyingencoded ballots 36 at a centralized location. In such embodiment,encoded ballots 36 may be carried to the centralized location or may beelectronically transmitted to the centralized polling place. As afurther alternative, step 176 may include tallying the multipleanonymous voting records 38 generated by computing device 12 to produceprecinct totals.

At step 178, a determination is made as to whether any irregularitieshave occurred in either the tallying process or the selections cast.This determination may be made by a computing device, the tallyingcomputer, a ballot reader, or a person associated with the electionauthority. If such a problem has occurred, the method may continue byrecounting encoded ballots at step 180. Additionally or alternatively,voting records 38 as stored in computing device 12 may be recounted toprovide an additional check on ballot totals. Recounts may also be madeusing a substantially similar procedure as described in above withregard to step 178 in response to requests by candidates or otherschallenging election results.

Computing device 12 may proceed through the voting process in the orderas shown in steps 150-180 in FIG. 5 and as described above. However, itis recognized that one skilled in the art may perform the steps of themethod in any suitable order.

FIG. 6 illustrates an example system for absentee voting. Absenteeballots 118 can play an important role in an election. It is difficultto ask voters to prepare a machine-readable ballot expressing thevoter's intent. Such ballots are generally prepared by a machine andsuch machines are not likely to be available to an absentee ballotvoter. Some prior art systems attempted to solve this problem bysupplying the absentee voter with pre-printed bar coded stickerscontaining encoding pertaining to all candidates. In addition to beingexpensive, adhesive labels may be destroyed prior to reaching the useror adhesive labels may become subsequently stuck in a reading machine.

One embodiment of the present invention allows absentee ballots 118 tobe distributed to voters without such adhesive backing. As shown in FIG.6, associated with each candidate is a bar code 120 that contains anencrypted code that will define the voter's choice. The ballot alsocontains an identifying area 122 with the name, picture, and/or otherinformation identifying the candidate. Near the start of the bar code isa box 124 and two arrows 126 straddling bar code 124. When indicating achoice, the absentee ballot voter is asked to fill in box 124 betweenthe pair of arrows 126 with a pen or pencil. When box 124 is filled in,the appropriate bar code will be obliterated. For an example todemonstrate this technique, assume that bar code 124 for candidateGeorge Washington contains the code “2.” Assume that the bar code 124for candidate John Adams contains the code “1.” When the voter fills inbox 124 in order to vote for George Washington, the code “2” will nolonger be able to be read by the machine reader. When read, the absenceof the code associated with the candidate along with the codes (notobliterated of the other candidates for the same office) unequivocallyindicates the voter's choice in a machine-readable fashion.

Although FIG. 6 illustrates absentee ballot 118 as including bar code120, absentee ballot 118 may include any other machine-readable meansfor indicating a voter selection. Each machine-readable area may beproximate to and associated with identifying area 122. In one example,the machine-readable area may include a symbol or character that may bemarked or otherwise altered by a voter to indicate the voter'sselection. Accordingly, machine-readable area may include one or moredashes, underscores, or a box proximate to identifying area 122. A votermay indicate a voter selection by checking or otherwise marking thedashes, underscores, or box.

In another example, absentee ballot 118 may include a series of numbersand/or letters associated with each candidate. In particularembodiments, the numbers and/or letters may be printed using magneticink character recognition (MICR) technology. MICR is a characterrecognition system that uses special ink and characters. MICR provides asecure, high-speed method of scanning and processing information. Whenabsentee ballot 118 that contains encodings printed in MICR ink is to beread, absentee ballot 118 is passed through a machine having MICRreading capabilities. The machine magnetizes the ink and then translatesthe magnetic information into characters. For reading and decodingabsentee ballots 118, any computing system or ballot reader, such asballot reader 37, vote tallying reader 39, and tallying computer 42 mayinclude software enabling MICR recognition and translation.

In making a voter selection, the voter may be requested to obliterate oralter the machine-readable area. For example, the voter may be requestedto scratch through the machine-readable area associated with thecandidate for whom the voter is selecting. When scratched through orotherwise altered, the machine-readable area associated with a candidateand the corresponding identifying area 122 will no longer be readable bythe machine reader. In this example, the absence of a code associatedwith the candidate along with the codes not obliterated for the othercandidates for the same office unequivocally indicates the voter'schoice in a machine-readable fashion.

In other embodiments, the voter may be requested to obliterate or alterthe machine-readable areas associated with each candidate that the voteris not selecting. In these embodiments, the scratched through orobliterated machine-readable area will not be readable by the machinereader. The only machine-readable area that will be detected and read bythe machine reader will be the machine-readable area that the voter hasnot marked or altered. In this example, when read, the presence of thecode associated with the candidate chosen and the absence of any othermachine-readable codes unequivocally indicates the voter's choice in amachine-readable fashion. Regardless of the type of machine-readableindicator used, possible technical advantages of such a system areimproved accuracy and rate of speed in counting absentee ballots 118.After absentee ballots 118 are read, tallying system 40 may be used tocount such absentee ballots 118.

Although the present invention has been described with severalembodiments, numerous changes, substitutions, variations, alterations,transformations, and modifications may be suggested to one skilled inthe art, and it is intended that the present invention encompass allsuch changes, substitutions, variations, alterations, transformations,and modifications as fall within the spirit and scope of the appendedclaims.

1. An advanced voting system, comprising one or more computing devicesoperable to: receive instructions from a voter to adjust a color of ascreen of a computing device, the color adjustment instructionsindicated by the voter's selection of non-dedicated keys of a physicalkeypad coupled to the computing device, the keys associated with aspecific color adjustment; execute the color adjustment instructionsreceived from the voter; display ballot questions to the voter; andreceive interactive vote selections from the voter.
 2. The system ofclaim 1, further comprising: a first non-dedicated key associated with afirst color adjustment; a second non-dedicated key associated with asecond color adjustment; and a third non-dedicated key associated with athird color adjustment.
 3. The system of claim 2, wherein: the firstcolor adjustment comprises a red color adjustment; the second coloradjustment comprises a green color adjustment; and the third coloradjustment comprises a blue color adjustment.
 4. The system of claim 2,wherein the voter may adjust the first, second, or third coloradjustments separately by separately selecting the first, second, orthird keys, respectively.
 5. The system of claim 4, wherein after amaximum value of the color adjustment is selected by the voter, thevoter may set the color adjustment back to zero or some other lowestvalue with the next incremental selection of the key associated with thecolor adjustment, further incremental selections of the key operable toincrease the color adjustment.
 6. The system of claim 2, wherein thevoter may adjust a contrast of the screen by selecting the first,second, and third keys in equal amounts.
 7. The system of claim 6,wherein the screen contrast adjustment automatically returns to adefault value after the voter has completed a voting session.
 8. Thesystem of claim 2, further comprising a fourth key associated with adefault screen contrast level.
 9. The system of claim 8, wherein thevoter may adjust the contrast of the screen to a default level byselecting the fourth key.
 10. The system of claim 1, wherein the screencolor adjustments automatically return to a default value after thevoter has completed a voting session.
 11. The system of claim 1, whereinthe voter may adjust a contrast of the screen by selecting a pluralityof keys, each associated with a specific color adjustment, in a sequenceselected by the voter.
 12. The system of claim 1, wherein the one ormore computing devices are further operable to receive instructions froma voter to adjust the volume of the computing device, the volumeadjustment instructions indicated by the voter's selection ofnon-dedicated tangible keys associated with a specific volumeadjustment.
 13. The system of claim 12, further comprising: a firstnon-dedicated key associated with a first volume adjustment; and asecond non-dedicated key associated with a second volume adjustment. 14.The system of claim 13, wherein: the first volume adjustment comprisesan increase in volume; and the second volume adjustment comprises adecrease in volume.
 15. The system of claim 13, wherein the voter mayadjust the first or second volume adjustments separately by separatelyselecting the first or second keys, respectively.
 16. The system ofclaim 12, wherein the volume adjustment automatically returns to adefault value after the voter has completed a voting session.
 17. Thesystem of claim 1, further comprising: a first non-dedicated key and asecond non-dedicated key associated with a first color adjustment; athird non-dedicated key and a fourth non-dedicated key associated with asecond color adjustment; and a fifth non-dedicated key and a sixthnon-dedicated key associated with a third color adjustment.
 18. Thesystem of claim 17, wherein: the first key increases the first coloradjustment; the second key decreases the first color adjustment; thethird key increases the second color adjustment; the fourth keydecreases the second color adjustment; the fifth key increases the thirdcolor adjustment; and the sixth key decreases the third coloradjustment.
 19. The system of claim 1, wherein the non-dedicated keys ofthe physical keypad are discernable from one another based on touch. 20.A method for advanced voting, comprising: receiving instructions from avoter to adjust a color of a screen of a computing device, the coloradjustment instructions indicated by the voter's selection ofnon-dedicated keys of a physical keypad coupled to the computing device,the keys associated with a specific color adjustment; executing thecolor instructions received from the voter; displaying ballot questionsto the voter on the screen of the computing device; and receivinginteractive vote selections from the voter on the computing device. 21.The method of claim 20, wherein the non-dedicated keys comprise: a firstnon-dedicated key associated with a first color adjustment; a secondnon-dedicated key associated with a second color adjustment; and a thirdnon-dedicated key associated with a third color adjustment.
 22. Themethod of claim 21, wherein: the first color adjustment comprises a redcolor adjustment; the second color adjustment comprises a green coloradjustment; and the third color adjustment comprises a blue coloradjustment.
 23. The method of claim 21, wherein the voter may adjust thefirst, second, or third color adjustments separately by separatelyselecting the first, second, or third keys, respectively.
 24. The methodof claim 23, wherein after a maximum value of the color adjustment isselected by the voter, setting the color adjustment back to zero or someother lowest value with the next incremental selection of the keyassociated with the color adjustment, further incremental selections ofthe key operable to increase the color adjustment.
 25. The method ofclaim 21, wherein the voter may adjust a contrast of the screen byselecting the first, second, and third keys in equal amounts.
 26. Themethod of claim 25, wherein the screen contrast adjustment automaticallyreturns to a default value after the voter has completed a votingsession.
 27. The method of claim 21, wherein the non-dedicated keysfurther comprise a fourth key associated with a default screen contrastlevel.
 28. The method of claim 27, wherein the voter may adjust thecontrast of the screen to a default level by selecting the fourth key.29. The method of claim 20, wherein the screen color adjustmentsautomatically return to a default value after the voter has completed avoting session.
 30. The method of claim 20, wherein the voter may adjusta contrast of the screen by selecting a plurality of keys, eachassociated with a specific color adjustment, in a sequence selected bythe voter.
 31. The method of claim 20, wherein the one or more computingdevices are further operable to receive instructions from a voter toadjust the volume of the computing device, the volume adjustmentinstructions indicated by the voter's selection of non-dedicated keysassociated with a specific volume adjustment.
 32. The method of claim31, wherein the non-dedicated keys associated with a specific volumeadjustment comprise: a first non-dedicated key associated with a firstvolume adjustment; and a second non-dedicated key associated with asecond volume adjustment.
 33. The method of claim 32, wherein: the firstvolume adjustment comprises an increase in volume; and the second volumeadjustment comprises a decrease in volume.
 34. The method of claim 32,wherein the voter may adjust the first or second volume adjustmentsseparately by separately selecting the first or second keys,respectively.
 35. The method of claim 31, wherein the volume adjustmentautomatically returns to a default value after the voter has completed avoting session.
 36. The method of claim 20, wherein the non-dedicatedkeys comprise: a first non-dedicated key and a second non-dedicated keyassociated with a first color adjustment; a third non-dedicated key anda fourth non-dedicated key associated with a second color adjustment;and a fifth non-dedicated key and a sixth non-dedicated key associatedwith a third color adjustment.
 37. The method of claim 36, wherein: thefirst key increases the first color adjustment; the second key decreasesthe first color adjustment; the third key increases the second coloradjustment; the fourth key decreases the second color adjustment; thefifth key increases the third color adjustment; and the sixth keydecreases the third color adjustment.
 38. The method of claim 20,wherein the non-dedicated keys of the physical keypad are discernablefrom one another based on touch.
 39. An advanced voting system,comprising one or more computing devices operable to: receiveinstructions from a voter to adjust the level of magnification of ascreen of the computing device, the magnification adjustment indicatedby the voter's selection of an assignable key associated with themagnification adjustment; execute the magnification adjustmentinstructions received from the voter; display ballot questions to thevoter; and receive interactive vote selections from the voter.
 40. Thesystem of claim 39, wherein the voter may adjust the level ofmagnification of the screen by selecting the assignable key.
 41. Thesystem of claim 39, wherein the assignable key is further associatedwith the Windows Magnifier Program.
 42. The system of claim 39, whereinthe computing device further comprises a Windows operating system havingthe Windows Magnifier Program.
 43. The system of claim 39, wherein thevoter may select a portion of the screen to magnify.
 44. The system ofclaim 43, wherein the voter may select a portion of the screen tomagnify by moving an indicating device over the portion to magnify. 45.The system of claim 39, wherein the computing device comprises a TabletPC.
 46. A method for advanced voting comprising: receiving instructionsfrom a voter to adjust the level of magnification of a screen of acomputing device, the magnification adjustment indicated by the voter'sselection of an assignable key associated with the magnificationadjustment; executing the magnification adjustment instructions receivedfrom the voter; displaying ballot questions to the voter on the screenof the computing device; and receiving interactive vote selections fromthe voter on the computing device.
 47. The method of claim 46, whereinthe assignable key is associated with the Windows Magnifier Program. 48.The method of claim 46, further comprising using the functions of theWindows Magnifier Program to magnify the screen.
 49. The method of claim46, further comprising adjusting the level of magnification of thescreen by selecting the assignable key.
 50. The method of claim 46,further comprising selecting a portion of the screen to magnify.
 51. Themethod of claim 50, wherein selecting a portion of the screen to magnifycomprises moving an indicating device over the portion of the screen tomagnify.